Forum Discussion

Cumulonimbus

Oct 11, 2022

f5 TLS Versions on Config Utility

Hi All, I've just been scanned on a ITHC, it's identied that the config utility is allowing TLS 1.0 and 1.1 to still be negotiated. Is there a way i can set the web service on the config util to on...

application delivery

security

Mohamed_Salah_

MVP

Oct 11, 2022

Hello,

For the F5 management (F5 GUI and SSH), check out the below articles:

https://support.f5.com/csp/article/K40232071

https://support.f5.com/csp/article/K22426638

For SSL profiles for services published through F5, check the below:

Go to Local Traffic > Profiles > SSL > Client.
Enter SSL profile
For Configuration, select Advanced.
If you are creating a new profile, under Options, select the Custom check box.
For Options, select Options List.
Under Options List, for Available Options, press Shift, select No SSL, No SSLv2, No SSLv3, and No TLSv1, and then click Enable
- this is just ena example on how to disable some TLS weak versions.
- (enabling means disabling these options